SSL Server certificates
Installing an SSL Server certificate on your website allows you to enable the TLS (Transport Layer Security) protocol, the standard solution for guaranteeing security of online transactions.
With the application of TLS, two crucial security mechanisms are enabled:
- secure channel: all data exchanged between your website and browsers are enciphered (full session encryption), preventing eavesdropping;
- server authentication: the user can verify the authenticity of the website and the identity of the organization managing it.
Actalis offers all three types of SSL certificates:
- Domain Validation SSL Certificate (DV)
- Organization Validation SSL Certificate (OV)
- Extended Validation SSL Certificate (EV)
Certificate attributes
| |
DV-class |
OV-class |
EV-class |
| Validation of domain control |
 |
|
|
| Validation of organization name |
– |
|
|
| Extended validation of organization |
– |
– |
|
| Enables server authentication |
|
|
|
| Enables secure channel (encrypted session) |
|
|
|
| Padlock shown in browser |
|
|
|
| Green bar or other special UI shown in browser |
– |
– |
|
| Organization name shown in browser |
– |
– |
|
| Issued with SHA-256 |
|
|
|
| Support for RSA server keys |
|
|
|
| Support for ECC server keys |
on request |
on request |
on request |
| Validity period |
1 year |
1 year |
1 year |
| Can be "Single Domain" |
|
|
|
| Can be "SAN" (multi-domain) |
|
|
|
| Can be "wildcard" |
|
|
– |
SSL Server certificates issued by Actalis are supported by all the major web browsers on all the main client platforms (desktop, tablet, smartphones, etc.). In addition, certificates can be issued very quickly, thanks to Actalis’ smooth and efficient procedures, either online at the SSL shop, or by means of a sales proposal.
| SSL shop |
Sales Proposal |
|
Buy whichever SSL certificate you need in just a few clicks from shop.actalis.com
Go to shop |
In order to activate a DV, OV or EV SSL certificate you must first request a commercial offer using the relevant form.
Go to the form |
Code Signing certificates
In addition to SSL Server certificates, Actalis also offers Code Signing certificates, suitable for signing a wide range of executable software (such as Java applets, installation packages, shared libraries, device drivers, etc.). Code signing allows end users and platforms to verify the integrity and authenticity of such files, thus protecting their PCs from malware. Actalis code signing certs are supported by all major run-time platforms (Windows, Java, etc.)
User documentation
CA and SubCA Certificates
Currently in use
Used in the past
Compliance Audit
Tools
Self-support: how to request and install your SSL Server certificate
Windows/IIS
(*) This is normally not necessary, unless auto-updates are disabled on your server.
Apache
Self-support: how to request and install your Code Signing certificate
Oracle Java
MS Windows
Apple OSX
How to revoke your certificate
To request revocation of your certificate, go to https://extwebra.actalis.it/portal/ and log in using the credentials that we sent you by email. Keep in mind that revocation is mandatory under some circumstances (please read our CPS carefully).
Problem reporting
To report problems related to SSL Server or Code Signing certificates issued by Actalis, you may:
- send an email to cert-problem at actalis.it (we commit to timely read that mailbox during working hours only),
- or - IN EMERGENCY ONLY - call our telephone number +39-0575-050.376 (please keep in mind that we do not provide technical support at that number: we only take charge of problems related to already issued certificates).
By "problems" we mean events or situations that - if confirmed - justify an urgent action by Actalis, such as the compromise of the owner's private key, a court order, the criminal use of the certificate (e.g. for phishing, or malware distribution), and so on. Depending on the problem severity, Actalis may decide to revoke the certificate, as provided for in the CPS.
You must provide at least the following information, when reporting a problem to Actalis, or your alert will be ignored:
- your full name
- your phone number
- description of the alleged problem
- enough information to identify the offending certificate
If the problem reporter claims to represent the certificate holder organization, he/she must prove that by answering some questions.
Warning: customer support is not provided through the phone number and the email address mentioned above. Support requests received via those channels will be ignored and will not receive an answer.
Reminder: if you are the certificate owner, you can at any time revoke your own certificate, by yourself, via the web interface at https://extwebra.actalis.it/portal/, after logging in with the credentials that have been sent to you at certificate issuance time.